CVE-2016-1000126

Reflected XSS in wordpress plugin admin-font-editor v1.8...

Mail.ru: XSS in https://e.mail.ru/cgi-bin/lstatic (Limited use)

Искал, своими методами, урлы с возможными уязвимостями. Используя google dork: site:mail.ru inurl:ajaxcall, нашёл вот такой: https://e.mail.ru/cgi-bin/lstatic?ajaxcall=1&x-email=oblaka63%40mail.ru&get=balloon&name=14&lang=ruRU&SpamBallonExp=0&SettingsOn=1&staticDomainName=imgsmail.ru Сразу привлё...

Reflected XSS in Create Issue Details page

The Create Issue Detail page is vulnerable to reflected XSS. 1. Login to https://$JIRA/ 2. Visit https://$JIRA/secure/CreateIssueDetails.jspa?reporter="alert'XSS'alert'XSS'p+name%3D"&pid=10000&issuetype=2...

XSS (reflected) in fieldsKeys parameter of GHCreateNewIssue.jspa

Targets: https://test01.jira-dev.com/secure/GHCreateNewIssue.jspa?key=&issueType=7&fieldsKeys=priority,customfield10006,summary,fixVersions,components,customfield10005,assignee,customfield10004,reporter,customfield100039fd29alert'XSS'15d31825f8e9d6606&fieldsValues=1@%@...

XSS Vulnerability in Facebook Translations !

Summary The Facebook Translations tool's search feature was vulnerable to a simple reflected XSS attack. How did it work? The Translations tool allows users to perform phrase searches within translations. In this case, when a search query returned 0 results, the script displayed a message "Your...

Project Forum 6.5.2.2978 Cross Site Request Forgery / Cross Site Scripting

!--========================================================================================================= //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...